scriptoriumadmin/claude-skills
1
0
Fork 0
mirror of https://github.com/alirezarezvani/claude-skills.git synced 2026-10-10 03:27:56 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
claude-skills/engineering
History
Reza Rezvani 6453a29ecf fix(security-auditor): reduce false positives — whitelist plugin dirs, remove 'token' from exfil pattern 
- Add .claude-plugin, .codex, .gemini to hidden file allowlist (FS-HIDDEN)
  These are required plugin infrastructure directories, not secrets.
- Remove 'tokens?' from PROMPT-EXFIL regex — 'access token' is a standard
  technical term in auth reference docs, causing false positives on every
  skill that documents JWT/OAuth flows (e.g. saas-scaffolder auth-billing-guide)
- Remaining PROMPT-EXFIL patterns (credentials, secrets, api_keys, .env, .ssh,
  .aws, ~/home, /etc) are specific enough to catch real threats

Fixes: CI security audit failure on PR #370 (7 CRITICAL false positives)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-17 15:43:37 +01:00
..
.claude-plugin feat(agenthub): add AgentHub plugin with cross-domain examples, SEO optimization, and docs site fixes 2026-03-17 12:10:46 +01:00
.codex release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
agent-designer release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
agent-workflow-designer fix(engineering): improve agent-workflow-designer - add scripts + extract references 2026-03-11 20:23:01 +01:00
agenthub feat(agenthub): add AgentHub plugin with cross-domain examples, SEO optimization, and docs site fixes 2026-03-17 12:10:46 +01:00
api-design-reviewer release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
api-test-suite-builder release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
autoresearch-agent feat(autoresearch-agent): fix critical bugs, package as plugin with 5 slash commands 2026-03-13 14:38:59 +01:00
changelog-generator release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
ci-cd-pipeline-builder release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
codebase-onboarding fix(engineering): improve codebase-onboarding - add scripts + extract references 2026-03-11 20:21:34 +01:00
database-designer release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
database-schema-designer release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
dependency-auditor release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
docker-development feat(skills): add research-summarizer and docker-development agent skills 2026-03-15 22:47:16 +01:00
env-secrets-manager fix(engineering): improve env-secrets-manager - add scripts + extract references 2026-03-11 20:23:50 +01:00
git-worktree-manager release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
helm-chart-builder feat(skills): add helm-chart-builder agent skill 2026-03-15 23:28:54 +01:00
interview-system-designer fix(engineering): address Claude Code review findings 2026-03-11 20:46:48 +01:00
mcp-server-builder release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
migration-architect release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
monorepo-navigator fix(engineering): improve monorepo-navigator - add scripts + extract references 2026-03-11 20:22:16 +01:00
observability-designer release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
performance-profiler fix(engineering): address Claude Code review findings 2026-03-11 20:46:48 +01:00
pr-review-expert release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
rag-architect release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
release-manager release: v2.1.1 — skill optimization, agents, commands, reference splits (#297) 2026-03-09 15:54:25 +01:00
runbook-generator fix(engineering): improve runbook-generator - add scripts + extract references 2026-03-11 20:24:23 +01:00
skill-security-auditor fix(security-auditor): reduce false positives — whitelist plugin dirs, remove 'token' from exfil pattern 2026-03-17 15:43:37 +01:00
skill-tester fix: repair 25 Python scripts failing --help across all domains 2026-03-10 05:51:27 +01:00
tech-debt-tracker fix(security): add disclaimers to sample code and scaffolding templates 2026-03-11 20:18:27 +01:00
terraform-patterns fix(terraform-patterns): align plugin.json version to repo versioning (2.1.2) 2026-03-16 16:10:07 +01:00
SKILL.md seo: optimize all 9 pack descriptions — add Gemini CLI, Cursor, OpenClaw keywords + 'agent skill/plugin' framing 2026-03-15 23:22:14 +01:00